11 posts in this topic

froggyliver 7

I have a customer that is needing to have a public computer available for guests. They will be printing and surfing the internet. I am trying to find a good kiosk program to use to help restrict the guests from wrong things that screw up the computer for others. This computer will be on a separate VLAN than the rest of the office.

When you "freeze" the machine, it essentially takes a snapshot, and when the machine is rebooted it reverts back to that snapshot, removing any changes that the user(s) may have made in the interim. (the issue with this is that if there is a virus that is deep freeze aware, it will infect the system permanently, which then would have to be reimaged)

Share this post

Link to post

Share on other sites

froggyliver 7

I have used deep freeze before, but I was thinking of a software interface that would auto run when Windows boots and the user would only have the option to run programs that are listed and restrict access to other parts of Windows. What they can't even see they can't break.

I will keep Deep Freeze in mind though as an alternative. That just might be the way to go.

Share this post

Link to post

Share on other sites

rr_dRock 227

I have used deep freeze before, but I was thinking of a software interface that would auto run when Windows boots and the user would only have the option to run programs that are listed and restrict access to other parts of Windows. What they can't even see they can't break.

I will keep Deep Freeze in mind though as an alternative. That just might be the way to go.

group policy mixed with a good active anti virus with a application blocker (such as kaspersky) and UAC seems like your best bet. you can absolutely restrict access to most things in the OS with gp.

that plus something like rollbackrx would make a good kiosk

Share this post

Link to post

Share on other sites

#Michael 207

I have used deep freeze before, but I was thinking of a software interface that would auto run when Windows boots and the user would only have the option to run programs that are listed and restrict access to other parts of Windows. What they can't even see they can't break.

I will keep Deep Freeze in mind though as an alternative. That just might be the way to go.